make secret token safe